eternity | 54cb1e6c6cfc831b8c00569e684f7f66cf4abafc3afae991ef707e2f57093667 | Triage

Sharing

General

Target

Silviozas Premium Proxy V3.8596.exe
Size

1.6MB
Sample

240322-tyh2waga4w
MD5

3c51e834e5771715a0a71541775a200c
SHA1

41fd0040a304476a4c6fd8823cd6fd70f1caaf35
SHA256

54cb1e6c6cfc831b8c00569e684f7f66cf4abafc3afae991ef707e2f57093667
SHA512

fd8dfb05cf322175080f6101dfcda7b94be7a0c3a966d3a973337633292493963a4c4f97baf8d9273a454ffa41ef0eaf24508c1dd45321b6faa665f530f39e2c
SSDEEP

24576:OwT7rC6q3J/4Cu4/DJbzwWstN3oMKC6uJJ/4Cu4/:XrC6q3JgCu4r1z6N3P77JJgCu4

Score

10^/10

eternity evasion spyware stealer trojan

Malware Config

Targets

- Target
  
  Silviozas Premium Proxy V3.8596.exe
- Size
  
  1.6MB
- MD5
  
  3c51e834e5771715a0a71541775a200c
- SHA1
  
  41fd0040a304476a4c6fd8823cd6fd70f1caaf35
- SHA256
  
  54cb1e6c6cfc831b8c00569e684f7f66cf4abafc3afae991ef707e2f57093667
- SHA512
  
  fd8dfb05cf322175080f6101dfcda7b94be7a0c3a966d3a973337633292493963a4c4f97baf8d9273a454ffa41ef0eaf24508c1dd45321b6faa665f530f39e2c
- SSDEEP
  
  24576:OwT7rC6q3J/4Cu4/DJbzwWstN3oMKC6uJJ/4Cu4/:XrC6q3JgCu4r1z6N3P77JJgCu4
Score

10^/10

eternity evasion spyware stealer trojan
- Contains code to disable Windows Defender
  A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.
- Detects Eternity stealer
  stealer
- Eternity
  Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
  eternity
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Disables Task Manager via registry modification
  evasion
- Drops startup file
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

stealereternity

behavioral1

eternityevasionspywarestealertrojan

behavioral2

eternityevasionspywarestealertrojan